Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/rUlyFElZuQ_HLky8ci1u26cqMzc.roa
File: rUlyFElZuQ_HLky8ci1u26cqMzc.roa (raw, json)
Hash identifier: KageeWmgzu9dsxg9Qv5DSJzVTpt3cCqlIedqtjFVyxY=
Subject key identifier: AD:49:72:14:49:59:B9:0F:C7:2E:4C:BC:72:2D:6E:DB:A7:2A:33:37
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0AC0
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/rUlyFElZuQ_HLky8ci1u26cqMzc.roa
Signing time: Sat 01 Feb 2025 05:25:32 +0000
ROA not before: Sat 01 Feb 2025 05:25:32 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2752 (0xac0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 1 05:25:32 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=AD4972144959B90FC72E4CBC722D6EDBA72A3337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:46:74:20:9b:36:c0:fc:cf:e1:07:72:1b:
da:4b:7f:8d:fc:2b:bf:a6:88:c7:57:f2:61:ca:e1:
ba:80:e7:d3:a6:e3:73:6a:07:40:44:8f:87:d4:3f:
9c:83:70:ec:5b:e6:fe:cd:4e:30:fc:58:47:0c:b6:
3e:85:15:09:b3:1a:ba:a2:94:e5:57:f3:d0:66:93:
8e:97:43:aa:0e:73:fe:ec:31:68:e0:dd:69:99:63:
69:59:52:aa:70:a3:60:e0:fd:31:60:f7:9d:d5:10:
dd:c6:21:23:c1:ab:31:dc:e7:de:7b:e2:5b:26:db:
ba:c6:d5:53:23:3b:86:a7:7d:59:8a:41:4b:00:0d:
dc:86:db:bd:06:41:77:3c:ad:43:2d:17:62:fc:f0:
22:5c:a3:be:eb:48:7e:95:ed:35:20:e9:a4:2e:3f:
8e:01:20:e2:58:11:da:f0:0d:26:40:62:29:12:ff:
df:16:4b:0c:51:58:13:37:ea:39:ae:dc:c3:a0:d3:
39:68:81:39:44:9c:76:64:ba:4b:ac:40:0c:31:00:
fe:0e:14:f9:72:97:ad:d5:de:cc:a5:67:ee:8f:f0:
80:e5:7e:33:1d:37:94:d9:93:3f:cd:2f:04:81:a7:
cd:4c:03:ce:66:9b:b7:6b:9d:b4:1b:62:1c:18:e9:
c7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:49:72:14:49:59:B9:0F:C7:2E:4C:BC:72:2D:6E:DB:A7:2A:33:37
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/rUlyFElZuQ_HLky8ci1u26cqMzc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
40:17:e7:4e:c3:f0:d7:82:fc:7c:f4:c9:f8:41:23:38:64:03:
18:ed:16:3c:05:6e:5b:77:8e:21:c4:3b:d8:96:96:a1:f5:31:
7e:79:d5:16:c6:4d:52:26:2f:9d:a8:10:2a:74:fa:04:4a:94:
04:2f:f5:12:e9:3e:25:93:fa:cb:2b:d0:89:7e:7a:0c:86:98:
d2:67:7d:6f:80:f3:7d:d4:96:36:03:f8:f7:8f:8e:36:55:29:
8e:1f:3f:1b:8b:6a:4c:fa:04:ef:63:fc:94:1d:0a:61:bb:8f:
44:8b:35:2a:ed:a3:b6:6b:6d:c9:41:1b:64:6a:5d:02:11:b2:
95:0b:d0:fc:de:3a:6f:91:af:50:50:09:13:97:3e:2c:a4:b6:
65:0d:7f:81:82:69:ea:2d:b6:bc:b0:70:c1:1e:07:2a:03:b1:
6e:9e:60:6a:28:21:55:88:c8:e4:5b:45:32:ed:c5:d2:31:1c:
f1:d7:1c:1a:13:42:e2:9b:b7:11:ea:2e:76:99:30:f6:16:26:
7e:82:06:63:6b:af:26:5c:88:10:ab:b3:8e:9d:e6:89:97:06:
c0:0b:cb:fc:a8:f4:8a:5a:fe:cf:57:9e:d3:05:2e:f0:79:79:
11:f8:e5:0d:11:3e:1b:10:85:c8:4b:8e:a1:79:13:ad:00:8e:
35:a5:9e:80
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 23:50:56 2025 by rpki-client